The General Data Protection Law (LGPD) , in force in Brazil since 2020, regulates the use, processing and protection of personal data. The legislation establishes clear guidelines for companies and organizations that collect, process or store information from individuals. Among its main guidelines are actions to prevent abuse or violations of the rights of data subjects.
Main practices by the LGPD
Collection of personal data without valid consent
It is to collect, process or store personal data without an adequate legal basis. In many cases, this requires the free, and explicit consent of the data subject, except in situations for by law, such as legal obligations or the protection of life.
Use of data for purposes other than those
Personal data cannot be for purposes other than those initially to the data subject. For example, if a person provides their data to participate in a promotion, this data cannot be to send advertising without consent.
Sharing data without authorization
Companies cannot share personal data with third parties without a legal justification or without informing the data subject. This includes business partners, suppliers or other parties.
Processing of sensitive data without a specific legal basis
Sensitive data, such as brazil whatsapp number data information about health, religion, sexual orientation or ethnic origin, have additional protection under the LGPD. Its use is restricted and can only occur under specific conditions, such as when necessary for public policies or with consent.
Storage of unnecessary or excessive data
It is to store personal data beyond what is necessary for the specific purpose. Collection must be proportionate and to the purpose.
Lack of adequate protection against leaks
Organizations are how to engage your audience with q&a videos to implement security measures to protect personal data. The lack of protection that results in leaks or access is a violation of the LGPD.
Discrimination or abuse on personal data
Data cannot be for discriminatory practices or practices that may cause harm to data subjects, such as denying services on information .
Denying access or deletion of data to the data subject
Data subjects have the china phone numbers right to access their data, correct incorrect information and request the deletion of data when applicable. Denying or hindering the exercise of these rights goes against the LGPD.
Consequences of prohibited practices
Companies that violate the LGPD are subject to penalties, which include:
Fines of up to 2% of the company’s annual revenue, to R$50 million per violation.
Partial or total suspension of the use of personal data.
Warnings and correction obligations.
The LGPD was to protect the fundamental rights to privacy and of individuals. Respecting its guidelines is essential to ensure consumer trust and avoid legal sanctions.